US Patent No: 7,318,235

Number of patents in Portfolio can not be more than 2000

Attestation using both fixed token and portable token

ALSO PUBLISHED AS: 20040117625

Stats

ATTORNEY / AGENT: (SPONSORED)

Importance

Loading Importance Indicators... loading....

Abstract

See full text

Methods, apparatus and machine readable medium are described for creating and using protected key blobs that require a particular portable token be present before use of the key or keys of the protected key blob is granted. Such protected key blobs may be used to establish a level of trust between a local user and the computing device.

Loading the Abstract Image... loading....

First Claim

See full text

Family

Loading Family data... loading....

Patent Owner(s)

Patent OwnerAddressTotal Patents
INTEL CORPORATIONSANTA CLARA, CA24616

International Classification(s)

  • [Classification Symbol]
  • [Patents Count]

Inventor(s)

Inventor Name Address # of filed Patents Total Citations
Grawrock, David W Aloha, OR 61 608

Cited Art Landscape

Patent Info (Count) # Cites Year
 
Other [Check patent profile for assignment information] (1)
2001/0037,450 System and method for process protection 178 2001
 
N.star-solid.Able Technologies, Inc. (1)
6,138,239 Method and system for authenticating and utilizing secure resources in a computer system 96 1998
 
TREND MICRO INCORPORATED (1)
5,680,547 Method and apparatus for controlling network and workstation access prior to workstation boot 168 1995
 
INTEGRATED TECHNOLOGOES OF AMERICA, INC. (1)
* 6,351,813 Access control/crypto system 212 1998
 
CRYPTOPEAK SOLUTIONS, LLC (1)
6,473,508 Auto-recoverable auto-certifiable cryptosystems with unescrowed signature-only keys 31 1998
 
KELLY SERVICES, INC. (1)
5,007,082 Computer software encryption apparatus 172 1990
 
LEVADA, VICTOR (1)
6,085,296 Sharing memory pages and page tables among computer processes 165 1997
 
BROWN, DOUGLAS G. (1)
5,944,821 Secure software registration and integrity assessment in a computer system 257 1996
 
SAMSUNG ELECTRONICS CO., LTD. (1)
5,717,903 Method and appartus for emulating a peripheral device to allow device driver development before availability of the peripheral device 124 1995
 
HITACHI, LTD. (7)
4,975,836 Virtual computer system 116 1985
4,802,084 Address translator 107 1986
5,187,802 Virtual machine system with vitual machine resetting store indicating that virtual machine processed interrupt without virtual machine control program intervention 102 1989
5,295,251 Method of accessing multiple virtual address spaces and computer system 97 1990
5,506,975 Virtual machine I/O interrupt control method compares number of pending I/O interrupt conditions for non-running virtual machines with predetermined number 127 1993
5,628,022 Microcomputer with programmable ROM 101 1994
5,504,922 Virtual machine with hardware display controllers for base and target machines 110 1994
 
AKAMAI TECHNOLOGIES, INC. (4)
2009/0132,648 CONTENT DELIVERY AND GLOBAL TRAFFIC MANAGEMENT NETWORK SYSTEM 41 2009
2009/0132,648 CONTENT DELIVERY AND GLOBAL TRAFFIC MANAGEMENT NETWORK SYSTEM 41 2009
2009/0132,648 CONTENT DELIVERY AND GLOBAL TRAFFIC MANAGEMENT NETWORK SYSTEM 41 2009
2009/0132,648 CONTENT DELIVERY AND GLOBAL TRAFFIC MANAGEMENT NETWORK SYSTEM 41 2009
 
DEUTSCHE TELEKOM AG (1)
6,222,923 Method for securing system protected by a key hierarchy 117 1997
 
APPLE INC. (1)
5,752,046 Power management system for computer device interconnection bus 135 1996
 
MCGOUGH, PAUL (1)
6,445,797 Method and system for performing secure electronic digital streaming 136 1998
 
HITACHI MICROCOMPUTER ENGINEERING LTD. (1)
4,571,672 Access control method for multiprocessor systems 143 1983
 
BT COUNTERPANE INTERNET SECURITY, INC. (1)
5,978,475 Event auditing system 214 1997
 
RENESAS ELECTRONICS CORPORATION (1)
5,872,994 Flash memory incorporating microcomputer having on-board writing function 189 1996
 
HELBIG, WALTER A., SR. (1)
5,953,502 Method and apparatus for enhancing computer system security 204 1997
 
KABUSHIKI KAISHA TOSHIBA (1)
5,890,189 Memory management and protection system for virtual memory in computer system 152 1996
 
DISK TECHNICIAN CORPORATION (1)
5,287,363 System for locating and anticipating data storage media failures 135 1991
 
NORTHROP GRUMMAN SYSTEMS CORPORATION (1)
* 2003/0115,468 Assignment of user certificates/private keys in token enabled public key infrastructure system 51 2001
 
INTERNATIONAL BUSINESS MACHINES CORPORATION (17)
4,366,537 Authorization mechanism for transfer of program control or data between different address spaces having different storage protect keys 134 1980
4,843,541 Logical resource partitioning of a data processing system 312 1987
5,230,069 Apparatus and method for providing private and shared access to host address and data spaces by guest programs in a virtual machine computer system 128 1990
5,237,616 Secure computer system having privileged and unprivileged memories 117 1992
5,317,705 Apparatus and method for TLB purge reduction in a multi-level machine system 150 1993
5,555,385 Allocation of address spaces within virtual machine compute system 164 1993
5,564,040 Method and apparatus for providing a server function in a logically partitioned hardware machine 196 1994
5,560,013 Method of using a target processor to execute programs of a source architecture that uses multiple address spaces 186 1994
5,555,414 Multiprocessing system including gating of host I/O and external enablement to guest enablement at polling intervals 135 1994
5,628,023 Virtual storage computer system having methods and apparatus for providing token-controlled access to protected pages of memory via a token-accessible view 60 1994
5,764,969 Method and system for enhanced management operation utilizing intermixed user level and supervisory level instructions with partial concept synchronization 101 1995
5,809,546 Method for managing I/O buffers in shared storage by structuring buffer table having entries including storage keys for controlling accesses to the buffers 96 1996
6,175,924 Method and apparatus for protecting application data in secure storage areas 146 1997
5,956,408 Apparatus and method for secure distribution of data 168 1998
6,615,278 Cross-platform program, system, and method having a global registry object for mapping registry equivalent functions in an OS/2 operating system environment 99 1999
2002/0133,701 Method for tracing traitor receivers in a broadcast encryption system 11 2001
* 2002/0129,261 Apparatus and method for encrypting and decrypting data recorded on portable cryptographic tokens 20 2001
 
ADVANCED MICRO DEVICES, INC. (2)
6,421,702 Interrupt driven isochronous task scheduler system 101 1998
6,499,123 Method and apparatus for debugging an integrated circuit 154 2000
 
NIKON CORPORATION (1)
6,252,650 Exposure apparatus, output control method for energy source, laser device using the control method, and method of producing microdevice 104 2000
 
TENNECO AUTOMOTIVE OPERATING COMPANY INC. (1)
6,158,546 Straight through muffler with conically-ended output passage 119 1999
 
HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P. (9)
5,319,760 Translation buffer for virtual machines with address space match 163 1991
5,421,006 Method and apparatus for assessing integrity of computer system software 471 1994
5,668,971 Posted disk read operations performed by signalling a disk read complete to the system prior to completion of data transfer 115 1996
6,055,637 System and method for accessing enterprise-wide resources by presenting to the resource a temporary credential 388 1996
6,061,794 System and method for performing secure device communications in a peer-to-peer bus architecture 262 1997
6,378,072 Cryptographic system 232 1998
6,125,430 Virtual memory allocation in a virtual address space having an inaccessible gap 147 1998
6,275,933 Security system for a computerized apparatus 103 1999
6,988,250 Trusted computing platform using a trusted device assembly 53 2000
 
LUCENT TECHNOLOGIES INC. (1)
5,740,178 Software for controlling a reliable backup memory 89 1996
 
CISCO TECHNOLOGY, INC. (1)
6,560,627 Mutual exclusion at the record level with priority inheritance for embedded systems using one semaphore 92 1999
 
PARKER-HANNIFIN CORPORATION (1)
5,473,692 Roving software license for a hardware agent 553 1994
 
GLOBALFOUNDRIES INC. (3)
6,093,213 Flexible implementation of a system management mode (SMM) in a processor 103 1996
6,044,478 Cache with finely granular locked-down regions 157 1997
2002/0147,916 Method and apparatus for securing portions of memory 101 2001
 
ABSOLUTE SOFTWARE CORPORATION (1)
6,269,392 Method and apparatus to monitor and locate an electronic device using a secured intelligent agent 183 1997
 
FUJITSU LIMITED (1)
5,361,375 Virtual computer system having input/output interrupt control of virtual machines 128 1993
 
SUN MICROSYSTEMS, INC. (5)
5,255,379 Method for automatically transitioning from V86 mode to protected mode in a computer system using an Intel 80386 or 80486 processor 153 1990
5,935,242 Method and apparatus for initializing a device 134 1996
5,987,557 Method and apparatus for implementing hardware protection domains in a system with no memory management unit (MMU) 159 1997
6,035,374 Method of executing coded instructions in a multiprocessor having shared execution resources including active, nap, and sleep states in accordance with cache miss latency 102 1997
6,131,166 System and method for cross-platform application level power management 159 1999
 
ACCENTURE GLOBAL SERVICES LIMITED (1)
6,529,909 Method for translating an object attribute converter in an information services patterns environment 459 1999
 
ETA TECHNOLOGIES CORPORATION (1)
* 5,727,061 Personal access management systems 22 1995
 
MICROCHIP TECHNOLOGY INCORPORATED (1)
5,469,557 Code protection in microcontroller with EEPROM fuses 116 1993
 
INTELLECTUAL VENTURES II LLC (2)
5,615,263 Dual purpose security architecture with protected internal operating system 197 1995
6,188,257 Power-on-reset logic with secure power down capability 100 1999
 
DIGITAL EQUIPMENT CORPORATION (1)
4,319,323 Communications device for data processing system 123 1980
 
NATIONAL SEMICONDUCTOR CORPORATION (1)
5,684,948 Memory management circuit which provides simulated privilege levels 107 1995
 
ROBERT BOSCH GMBH (1)
4,430,709 Apparatus for safeguarding data entered into a microprocessor 100 1981
 
EMC CORPORATION (1)
5,633,929 Cryptographic key escrow system having reduced vulnerability to harvesting attacks 120 1995
 
INTEL CORPORATION (34)
5,075,842 Disabling tag bit recognition and allowing privileged operations to occur in an object-oriented memory protection mechanism 124 1989
5,455,909 Microprocessor with operation capture facility 100 1992
5,386,552 Preservation of a computer system processing state in a mass storage device 209 1994
5,568,552 Method for providing a roving software license from one node to another node 423 1995
5,805,712 Apparatus and method for providing secured communications 272 1995
5,835,594 Methods and apparatus for preventing unauthorized write access to a protected non-volatile storage 154 1996
5,729,760 System for providing first type access to register if processor in first mode and second type access to register if processor not in first mode 130 1996
5,844,986 Secure BIOS 284 1996
5,937,063 Secure boot 259 1996
5,852,717 Performance optimizations for computer networks utilizing HTTP 301 1996
5,757,919 Cryptographically protected paging subsystem 227 1996
5,978,481 Modem compatible method and apparatus for encrypting data that is transparent to software applications 103 1997
6,058,478 Apparatus and method for a vetted field upgrade 128 1997
6,175,925 Tamper resistant player for scrambled contents 131 1997
6,178,509 Tamper resistant methods and apparatus 144 1997
6,205,550 Tamper resistant methods and apparatus 142 1997
6,357,004 System and method for ensuring integrity throughout post-processing 121 1997
6,249,872 Method and apparatus for increasing security against unauthorized write access to a protected memory 108 1998
6,192,455 Apparatus and method for preventing access to SMRAM space through AGP addressing 123 1998
6,173,417 Initializing and restarting operating systems 160 1998
6,115,816 Optimized security functionality in an electronic system 138 1998
2002/0004,900 METHOD FOR SECURE ANONYMOUS COMMUNICATION 79 1998
6,463,535 System and method for verifying the integrity and authorization of software before execution in a local platform 205 1998
6,282,650 Secure public digital watermark 178 1999
6,389,537 Platform and method for assuring integrity of trusted agent communications 224 1999
6,633,981 Electronic system and method for controlling access through user authentication 124 1999
6,535,988 System for detecting over-clocking uses a reference signal thereafter preventing over-clocking by reducing clock rate 113 1999
6,507,904 Executing isolated mode instructions in a secure system running in privilege rings 145 2000
6,633,963 Controlling access to multiple memory zones in an isolated execution environment 148 2000
6,678,825 Controlling access to multiple isolated memories in an isolated execution environment 98 2000
2003/0002,668 Multi-level, multi-dimensional content protections 26 2001
2003/0126,453 Processor supporting execution of an authenticated code instruction 89 2001
7,028,149 System and method for resetting a platform configuration register 43 2002
7,165,181 System and method for establishing trust without revealing identity 26 2002
 
ATI TECHNOLOGIES ULC (2)
6,321,314 Method and apparatus for restricting memory access 171 1999
6,397,379 Recording in a program execution profile references to a memory-mapped active device 184 1999
 
The United States of America as represented by the Secretary of the Navy (1)
6,108,644 System and method for electronic transactions 177 1998
 
TEXAS INSTRUMENTS INCORPORATED (1)
4,521,852 Data processing device formed on a single semiconductor substrate having secure memory 123 1982
 
MITSUBISHI DENKI KABUSHIKI KAISHA (2)
5,706,469 Data processing system controlling bus access to an arbitrary sized memory area 92 1995
6,101,584 Computer system and semiconductor device on one chip including a memory and central processing unit for making interlock access to the memory 103 1997
 
STMicroelectronics S.A. (1)
7,133,990 System and method for controlling access to protected data stored in a storage unit 22 2002
 
MICROSEMI SEMICONDUCTOR (U.S.) INC. (1)
5,901,225 System and method for performing software patches in embedded systems 134 1996
 
Amdahl Corporation (1)
5,574,936 Access control mechanism controlling access to and logical purging of access register translation lookaside buffer (ALB) in a computer system 109 1995
 
IDENTIX INCORPORATED (1)
2001/0027,527 Secure transaction system 192 2001
 
SILICON STORAGE TECHNOLOGY, INC. (1)
6,292,874 Memory management method and apparatus for partitioning homogeneous memory and restricting access of installed applications to predetermined memory ranges 164 1999
 
SEIKO EPSON CORPORATION (1)
6,088,262 Semiconductor device and electronic equipment having a non-volatile memory with a security function 112 1998
 
NCR CORPORATION (1)
4,403,283 Extended memory system and method 128 1980
 
SCSK CORPORATION (1)
6,301,646 Pointer verification system and method 103 1999
 
Silicon Systems Design Ltd. (1)
6,014,745 Protection for customer programs (EPROM) 112 1997
 
Codex Technologies, Inc. (2)
6,463,537 Modified computer motherboard security and identification system 176 1999
2003/0018,892 Computer with a modified north bridge, security engine and smart card having a secure boot capability and method for secure booting a computer 129 2001
 
MICRON TECHNOLOGY, INC. (1)
5,970,147 System and method for configuring and registering a cryptographic device 180 1997
 
FREESCALE SEMICONDUCTOR, INC. (1)
5,737,760 Microcontroller with security logic circuit which prevents reading of internal memory by external program 166 1995
 
XEROX CORPORATION (1)
2003/0231,328 Multiple printer driver 57 2002
 
CEVA IRELAND LIMITED (1)
6,282,651 Security system protecting data with an encryption key 104 1999
 
KINGLITE HOLDINGS INC. (1)
6,557,104 Method and apparatus for secure processing of cryptographic keys 244 1997
 
SUMITOMO BANK OF NEW YORK TRUST COMPANY (1)
6,378,068 Suspend/resume capability for a protected mode microprocesser 191 1995
 
INTELLECTUAL VENTURE FUNDING LLC (1)
6,199,152 Translated memory protection apparatus for an advanced microprocessor 151 1996
 
UTMC MICROELECTRONIC SYSTEMS INC. (1)
5,079,737 Memory management unit for the MIL-STD 1750 bus 103 1988
 
VAN DETSAN NETWORKS LIMITED LIABILITY COMPANY (1)
4,759,064 Blind unanticipated signature systems 251 1985
 
PURE FILL CORPORATION (1)
5,582,717 Water dispenser with side by side filling-stations 137 1993
 
ROCKWELL COLLINS, INC. (1)
6,374,286 Real time processor capable of concurrently running multiple independent JAVA machines 319 1998
 
MICROSOFT TECHNOLOGY LICENSING, LLC (7)
4,974,159 Method of transferring control in a multitasking computer system 59 1988
5,815,665 System and method for providing trusted brokering services over a distributed network 687 1996
6,473,800 Declarative permission requests in a computer system 241 1998
6,327,652 Loading and identifying a digital rights management operating system 437 1999
6,330,670 Digital rights management operating system 474 1999
6,609,199 Method and apparatus for authenticating an open system application to a portable IC device 189 1999
6,651,171 Secure execution of program code 152 1999
 
Fujitsu Siemens Computer GmbH (1)
6,339,816 Method for improving controllability in data processing system with address translation 104 2000
 
IP SOFTWARE AUTHENTICATION SERVICES LLC (1)
2004/0133,803 Methods and apparatus for protecting information 6 2003
 
PANTAURUS LLC (1)
6,272,533 Secure computer system and method of providing secure access to a computer system including a stand alone switch operable to inhibit data corruption on a storage device 147 1999
 
CERTCO, INC. (1)
5,825,880 Multi-step digital signature method and system 239 1997
 
VMWARE, INC. (1)
6,496,847 System and method for virtualizing computer systems 318 1998
 
Tokyo Shibaura Denki Kabushiki Kaisha (1)
4,621,318 Multiprocessor system having mutual exclusion control function 74 1983
 
CP8 TECHNOLOGIES (3)
4,795,893 Security device prohibiting the function of an electronic data processing unit after a first cutoff of its electrical power 98 1987
5,293,424 Secure memory card 247 1992
5,479,509 Method for signature of an information processing file, and apparatus for implementing it 219 1994
 
SILICON GRAPHICS INTERNATIONAL CORP. (1)
6,148,379 System, method and computer program product for page sharing between fault-isolated cells in a distributed shared memory system 109 1997
 
SPERRY CORPORATION (1)
4,419,724 Main bus interface package 98 1980
 
ACTIVCARD (1)
* 2003/0005,317 Method and system for generating and verifying a key protection certificate 23 2001
 
Dell USA, L.P. (1)
5,657,445 Apparatus and method for limiting access to mass storage devices in a computer system 167 1996
 
LENOVO (SINGAPORE) PTE. LTD. (3)
5,022,077 Apparatus and method for preventing unauthorized access to BIOS in a personal computer system 195 1989
6,684,326 Method and system for authenticated boot operations in a computer system of a networked computing environment 119 1999
2002/0169,717 System and method for installing a remote credit card authorization on a system with a TCPA complaint chipset 85 2001
 
Real Time, Inc. (1)
6,412,035 Apparatus and method for decreasing the response times of interrupt service routines 116 1998
 
GREENLIANT LLC (2)
6,339,815 Microcontroller system having allocation circuitry to selectively allocate and/or hide portions of a program memory address space 157 1998
6,505,279 Microcontroller system having security circuitry to selectively lock portions of a program memory address space 101 1998
 
INTARSIA SOFTWARE LLC (1)
* 6,741,991 Data management system 42 2001
 
BIOSCRYPT (DELAWARE), INC. (1)
* 5,790,668 Method and apparatus for securely handling data in a database of biometrics and associated data 81 1995
 
BOZAK INVESTMENTS, LLC (1)
5,459,867 Kernels, description tables, and device drivers 206 1993
 
NOVELPOINT SECURITY LLC (1)
6,212,635 Network security system allowing access and modification to a security subsystem after initial installation when a master token is in place 242 1998
 
SMART LINK LTD. (1)
6,092,095 Real-time task manager for a personal computer 155 1996
 
NOVELL INTELLECTUAL PROPERTY HOLDING, INC. (1)
5,919,257 Networked workstation intrusion detection system 334 1997
 
ZERO-KNOWLEDGE SYSTEMS INTERNATIONAL, INC. (2)
5,606,617 Secret-key certificates 213 1994
5,604,805 Privacy-protected transfer of electronic information 123 1996
 
INFOSPACE, INC. (1)
4,529,870 Cryptographic identification, financial transaction, and credential device 428 1982
 
Entrust Technologies Limited (2)
* 6,393,565 Data management system and method for a limited capacity cryptographic storage unit 30 1998
6,363,485 Multi-factor biometric authenticating device and method 187 1998
 
OPEN INVENTION NETWORK, LLC (1)
5,935,247 Computer system having a genetic code that cannot be directly accessed and a method of maintaining the same 92 1997
 
SAFENET, INC. (1)
6,282,657 Kernel mode protection 129 1998
 
MATSUSHITA ELECTRIC INDUSTRIAL CO., LTD. (1)
5,796,845 Sound field and sound image control apparatus and method 109 1997
 
McAfee, Inc. (1)
5,459,869 Method for providing protected mode services for device drivers and other resident software 130 1994
* Cited By Examiner

Patent Citation Ranking

Forward Cite Landscape

Patent Info (Count) # Cites Year
 
INTERNATIONAL BUSINESS MACHINES CORPORATION (1)
8,112,628 Using a portable computing device as a smart key device 0 2009
 
HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P. (1)
* 8,090,939 Digital certificate that indicates a parameter of an associated cryptographic token 3 2005
 
INTEL CORPORATION (2)
* 7,480,806 Multi-token seal and unseal 8 2002
* 7,809,957 Trusted platform module for generating sealed data 7 2005
 
JPMORGAN CHASE BANK, NATIONAL ASSOCIATION (2)
* 8,190,893 Portable security transaction protocol 3 2004
8,583,928 Portable security transaction protocol 0 2012
 
CASSIDIAN SAS (1)
* 2011/0030,033 MANAGING SECURE USE OF A TERMINAL 0 2009
 
MICROSOFT TECHNOLOGY LICENSING, LLC (3)
* 7,891,008 Profile protection 8 2005
* 8,761,400 Hardware linked product key 0 2005
* 8,620,818 Activation system architecture 1 2007
 
NOKIA TECHNOLOGIES OY (1)
* 7,913,086 Method for remote message attestation in a communication system 3 2007
 
SYMANTEC CORPORATION (3)
* 8,087,074 One time password 4 2005
* 8,434,138 One time password 1 2011
* 2012/0096,535 One Time Password 3 2011
 
III HOLDINGS 1, LLC (7)
* 7,571,472 Methods and apparatus for credential validation 6 2002
* 2004/0128,502 Methods and apparatus for credential validation 14 2002
* 7,454,622 Method and system for modular authentication and session management 16 2002
* 8,291,228 Method and system for modular authentication and session management 1 2008
8,474,025 Methods and apparatus for credential validation 1 2009
* 8,819,416 Method and system for modular authentication and session management 0 2012
* 2013/0031,359 METHOD AND SYSTEM FOR MODULAR AUTHENTICATION AND SESSION MANAGEMENT 0 2012
* Cited By Examiner

Maintenance Fees

Fee Large entity fee small entity fee micro entity fee due date
7.5 Year Payment $3600.00 $1800.00 $900.00 Jul 8, 2015
11.5 Year Payment $7400.00 $3700.00 $1850.00 Jul 8, 2019
Fee Large entity fee small entity fee micro entity fee
Surcharge - 7.5 year - Late payment within 6 months $160.00 $80.00 $40.00
Surcharge - 11.5 year - Late payment within 6 months $160.00 $80.00 $40.00
Surcharge after expiration - Late payment is unavoidable $700.00 $350.00 $175.00
Surcharge after expiration - Late payment is unintentional $1,640.00 $820.00 $410.00